   "A personalization parameter."
   (.getBytes "icecap blob storage"))
 
-(defn blake2b-kdf
-  "Create a key derivation function based on BLAKE2b."
-  (reify KDF
-    (derive [_ cap master-key salt]
-      (let [output (blake2b cap :salt salt :key master-key :personal personal)
-            index-start-byte (inc cap-key-bytes)
-            index-end-byte (+ index-start-byte index-bytes)
-            index (Arrays/copyOfRange output index-start-byte index-end-byte)
-            cap-key (Arrays/copyOf output cap-key-bytes)]
-        {:index index :cap-key cap-key}))))
+;; (defn blake2b-kdf
+;;   "Create a key derivation function based on BLAKE2b."
+;;   (reify KDF
+;;     (derive [_ cap mccaster-key salt]
+;;       (let [output (blake2b cap :salt salt :key master-key :personal personal)
+;;             index-start-byte (inc cap-key-bytes)
+;;             index-end-byte (+ index-start-byte index-bytes)
+;;             index (Arrays/copyOfRange output index-start-byte index-end-byte)
+;;             cap-key (Arrays/copyOf output cap-key-bytes)]
+;;         {:index index :cap-key cap-key}))))
 
 (defprotocol EncryptionScheme
   "An authenticated encryption scheme."

  location of the blob in the database) and the cap key (the key used
  to encrypt the blob).
  - An authenticated encryption scheme."
  (:require [caesium.crypto.generichash :refer [blake2b]]
            [caesium.crypto.secretbox :as secretbox])
  (:import java.util Arrays))

(def master-key-bits
  "The size of the master key, in bits."

    (encrypt [_ _ plaintext] plaintext)
    (decrypt [_ _ ciphertext] ciphertext)))

;; (defn secretbox-scheme
;;   "An encryption scheme based on NaCl's `secretbox`.

;;   Please note that this uses a fixed nonce, and that's *perfectly
;;   fine*. This is the only message ever encrypted with that key!"
;;   (reify EncryptionScheme
;;     (encrypt [_ key plaintext]
;;       (secretbox/encrypt key (secretbox/int->nonce 1) plaintext))
;;     (decrypt [_ key ciphertext]
;;       (secretbox/decrypt key (secretbox/int->nonce 1) ciphertext))))
